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Abstract 

The vertical stabilizer is the key aerodynamic surface that provides an aircraft with its directional 
stability characteristic while ailerons and rudder are the primary control surfaces that give pilots control 
authority of the yawing and banking maneuvers. Losing the vertical stabilizer will, therefore, result in 
the consequential loss of lateral/directional stability and control, which is likely to cause a fatal crash. 
In this paper, we construct a scenario of a damaged aircraft model which has no physical rudder control 
surface, and then a strategy based on differential thrust is proposed to be utilized as a control input 
to act as a ’’virtual” rudder to help maintain stability and control of the damaged aircraft. The Hoo 
loop-shaping approach based robust control system design is implemented to achieve a stable and robust 
flight envelope, which is aimed to provide a safe landing. Investigation results demonstrate successful 
application of such robust differential thrust methodology as the damaged aircraft can achieve stability 
within feasible control limits. Finally, the robustness analysis results conclude that the stability and 
performance of the damaged aircraft in the presence of uncertainty remain within desirable limits, and 
demonstrate not only a robust, but a safe flight mission through the proposed Hoo loop-shaping robust 
differential thrust control methodology. 


Nomenclature 

A/C aircraft 

Ad state matrix of the damaged aircraft 
Bd input matrix of the damaged aircraft 

b aircraft wing span, ft 

Cd output matrix of the damaged aircraft 

CLi dimensionless derivative of rolling moment, i = P^Sa^Sr 
C^i dimensionless derivative of yawing moment, i = (3^ Sa, Sr 

Cvi dimensionless derivative of side force, i = p^r, (3^ Sa, Sr 
Dd state transition matrix of the damaged aircraft 
^ change in side wash angle with respect to change in side slip angle 
g gravitational acceleration, ft/s‘^ 

Ixx normalized mass moment of inertia about the x axis, slug * fC 
Ixz normalized product of inertia about the xz axis, slug * fC 
Izz normalized mass moment of inertia about the z axis, slug * fC 

Li dimensional derivative of rolling moment, i = p^r, P^Sa^Sr 

Ly vertical stabilizer lift force, Ibf 
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ly distance from the vertical stabilizer aerodynamic center to the aircraft center of gravity, ft 
m aircraft mass, slugs 

Ni dimensional derivative of yawing moment, i = yd, Sa^Sy^ ST 
p roll rate, degjs 

r yaw rate, degjs 

S aircraft wing area, ft^ 

Sy vertical stabilizer area, 

T engine thrust, Ihf 

Tc engine thrust command, Ibf 
t time, s 

td time delay, s 

Vy vertical stabilizer volume ratio, ft^ 

V airspeed, ft/s 

W aircraft weight, lbs 

Yi dimensional derivative of side force, i = p^r^ /3, Sa^ Sy 

He distance from the outermost engine to the aircraft center of gravity, ft 

Zy distance from the vertical stabilizer center of pressure to the fuselage center line, ft 

a angle of attack, deg 

P side slip angle, deg 

7 flight path angle, deg 

Sa aileron deflection, deg 

Sy rudder deflection, deg 

AT collective thrust, Ibf 

ST differential thrust, Ibf 

( damping ratio 

T] efficiency factor 

0 pitch angle, deg 

p air density, slug/ft^ 

T time constant, s 

(j) roll angle, deg 

uj bandwidth frequency , 1/s 
( ) first order time derivative 
( ) second order time derivative 
( ) trimmed value 

( damaged aircraft dynamics 


1 Introduction 

The vertical stabilizer of an aircraft is an essential element in providing the aircraft with its directional 
stability characteristic while ailerons and rudder serve as the primary control surfaces of the yawing and 
banking maneuvers. In the event of an aircraft losing its vertical stabilizer, the sustained damage will cause 
lateral/directional stability to be compromised and lack of control is likely to result in a fatal crash. Notable 
examples of such a scenario are the crash of the American Airline 587 in 2001 when an Airbus A300-600 lost 
its vertical stabilizer in wake turbulence, killing all passengers and crew members [T] and the crash of Japan 
Airlines Flight 123 in 1985 when a Boeing 747-SRlOO lost its vertical stabilizer leading to an uncontrollable 
aircraft, resulting in 520 casualties [2]. 

However, not all situations of losing the vertical stabilizer resulted in a total disaster. In one of those 
cases, the United Airlines Flight 232 in 1989 [3], differential thrust was proved to be able to make the aircraft 
controllable. Another remarkable endeavor is the landing of the Boeing 52-H even though the aircraft lost 
most of its vertical stabilizer in 1964 [4]. 

In literature, research on this topic has been conducted with two main goals: to understand the response 
characteristics of the damaged aircraft such as the work of Bacon and Gregory [5], Nguyen and Stepanyan [6], 
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and Shah [7], as well as to come up with an automatic control algorithm to save the aircraft from disasters 
where the work of Burcham et ah [8], Guo et ah [9], Liu et ah m, Tao and loanou and Urnes and 
Nielsen m hold the detailed analysis. 

There are many valuable efforts in literature, such as the work of Shah [7], where a wind tunnel study 
was performed to evaluate the aerodynamic effects of damages to lifting and stability/control surfaces of a 
commercial transport aircraft. In his work, Shah [7] studied this phenomenon in the form of partial or total 
loss of the wing, horizontal, or vertical stabilizers for the development of flight control systems to recover the 
damaged aircraft from adverse events. The work of Nguyen and Stepanyan [6] investigates the effect of the 
engine response time requirements of a generic transport aircraft in severe damage situations associated with 
the vertical stabilizer. They carried out a study which concentrates on assessing the requirements for engine 
design for fast responses in an emergency situation. In addition, the use of differential thrust as a propulsion 
command for the control of directional stability of a damaged transport aircraft was studied by Urnes and 
Nielsen m to identify the effect of the change in aircraft performance due to the loss of the vertical stabilizer 
and to make an improvement in stability utilizing engine thrust as an emergency yaw control mode with 
feedback from the aircraft motion sensors. 

Existing valuable research in literature provides very unique insight into the dynamics of such an extreme 
scenario whereas in this paper a unique extension to the existing works is provided. Here, we provide a Hoo 
loop-shaping based robust differential thrust control methodology to control such a damaged aircraft and 
land safely. This research is motivated to improve air travel safety in commercial aviation by incorporating 
the utilization of differential thrust to regain lateral/directional stability for a commercial aircraft (in this 
case, a Boeing 747-100) with a damaged vertical stabilizer. For this purpose, the damaged aircraft model 
is constructed in Section where its plant dynamics is investigated. In Section the engine dynamics 
of the aircraft is modeled as a system of differential equations with corresponding time constant and time 
delay terms to study the engine response characteristic with respect to a differential thrust input, and the 
novel differential thrust control module is developed to map the rudder input to differential thrust input. In 
Section]^ the aircraft’s open loop system response is investigated. In Sectionthe robust control system 
design based on Hoo loop-shaping approach is implemented as a means to stabilize the damaged aircraft. 
Investigation provides remarkable results of such robust differential thrust methodology as the damaged 
aircraft can reach steady state stability relatively fast, under feasible control efforts. In Sectionrobustness 
and uncertainty analysis is conducted to test the guaranteed stability bounds and to validate the overall 
performance of the system in the presence of given ball of uncertainty. With Sectionthe paper is finalized, 
and future work is discussed. 


2 The Damaged Aircraft Model 

In this paper, the flight scenario is chosen to be a steady, level cruise flight for the Boeing 747-100 at Mach 
0.65 and 20,000 feet. It is assumed that at one point during the flight, the vertical stabilizer is completely 
damaged, and in the followings the means to control such aircraft is investigated in such an extreme case 
scenario. For this purpose, first, the damaged aircraft model is developed for analysis, where the flight 
conditions for the damaged model are summarized in Table 


Table 1: Flight conditions 


Parameter 

Value 

Altitude {ft) 

20,000 

Air Density {slug/ft^) 

0.001268 

Airspeed {ft/s) 

673 


2.1 The Damaged Aircraft Model 

The Boeing 747-100 was chosen for this research due to its widely available technical specification, aerody¬ 
namics, and stability derivative data. The data for the nominal (undamaged) Boeing 747-100 are summarized 
in Table [21 
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Table 2: The nominal (undamaged) aircraft data [HI [15] 


Parameter 

Value 

s {m 

5500 

bift) 

196 

c (ft) 

27.3 

Ve {ft) 

69.83 

W (lbs) 

6.3663 10'’ 

m (slugs) 

19786.46 

I XX {slug* fi^) 

18.2 * 10*^ 

lyy {slug * ft^) 

33.1 * 10** 

Izz {slug*ft^) 

49.7 * 10*^ 

Ixz {slug * ft^) 

0.97 * 10*^ 

Cl0 

-0.160 

CLy 

-0.340 

CLr 

0.130 

Cls„. 

0.013 

Cl Sr 

0.008 

Cnp 

0.160 

Cnp 

-0.026 

Cnv 

-0.28 

CNSa 

0.0018 

CN5r. 

-0.100 

Cvp 

-0.90 

Cvp 

0 

Cvr 

0 

CvSa 

0 

^YSr 

0.120 
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For the modeling of the damaged aircraft, in case of the loss of the vertical stabilizer, lateral/directional 
stability derivatives need to be re-examined and recalculated due to the resulting significant changes in 
the geometry and the aerodynamic behavior. Since the whole aerodynamic structure is affected, the new 
corresponding stability derivatives have to be calculated and studied. The lateral/directional dimensionless 
derivatives that depend on the vertical stabilizer include [16] : 


Cyp = -11-^CLav (^1 + (1) 

= -2 (2) 


Cnp = + rivVyCLav 



C’N r — 27y^V^ 



Cl 


(XV 


(3) 

(4) 


When the vertical stabilizer is completely lost in an aircraft, the vertical tail area, vertical tail volume, 
and associated efficiency factor will all be zero, resulting in Cy (3 = Cyv = C^ATr = 0- If the vertical stabilizer 
is assumed to be the primary aerodynamic surface responsible for the weathercock stability, then (7^/3 = 0 
and finally, we have Clv = 

In addition, without the vertical stabilizer, the mass and inertia data of the damaged aircraft are going 
to change as well, where the values that reflect such a scenario (for the damaged aircraft) are calculated and 
listed in Table [H 


Table 3: The damaged aircraft mass and inertia data 


Parameter 

Value 

W {lbs) 

6.2954 * 10^ 

m (slugs) 

19566.10 

Ixx {slug * fi^) 

17.893 * 10*^ 

lyy {slug * ft^) 

30.925 10*^ 

{slug*ft^) 

47.352 * 10*^ 

Ixz {slug * ft^) 

0.3736 10*^ 


In this study, during an event of the loss of the vertical stabilizer, it is proposed that the differential 
thrust component of aircraft dynamics be utilized as an alternate control input replacing the rudder control 
to regain stability and control of lateral/directional flight dynamics. Next, the lateral-directional linear 
equations of motion of the damaged aircraft are presented, with the ailerons differential thrust (^T), 
and collective thrust (AT) as control inputs |6|, as 
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( 6 ) 


In this case, if the initial trim side-slip angle is zero, then AT does not have any significance in the control 
effectiveness for a small perturbation around the trim condition |6|, which means that the above equations 
can be reduced to the final form as: 
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2.2 Plant Dynamics 


( 7 ) 


Based on the calculated data for the lateral/directional stability derivatives, mass and inertia of the aircraft 
without its vertical stabilizer, the lateral/directional state-space representation of the damaged aircraft is 
obtained as the following 
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(9) 

( 10 ) 

(11) 


where the subscript ( )d stands for the damaged aircraft dynamics. 

Here, Ad represents the state matrix of the damaged aircraft, and Bd stands for the input matrix of the 
scenario where the ailerons {5a) and differential thrust {5T) are control inputs of the damaged aircraft. Cd 
is the output matrix, and Dd is the direct (state transition) matrix of the damaged aircraft. 

In addition, for more in-depth intuition, the damping characteristics of the damaged aircraft are also 
provided in Table 


Table 4: Damping characteristics of the damaged aircraft 


Mode 

Pole Location 

Damping 

Frequency (l/s) 

Period {s) 

Dutch Roll 

0.0917 ±i0.43 

-0.209 

0.439 

14.2969 

Spiral 

6.32 10-1^ 

-1 

6.32 10-1^ 

9.9486 10^^ 

Roll 

-1.04 

1 

1.04 

6.0422 


Table clearly indicates the unstable nature of the damaged aircraft in the Dutch roll mode by the 
obvious Right Half Plane (RHP) pole locations. Furthermore, the pole of the spiral mode lies at the origin. 
The only stable mode of the damaged aircraft remains to be the roll mode. 

Following the aerodynamic and stability analysis of the damaged aircraft, we next concentrate on the 
differential thrust methodology. 
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3 Differential Thrust as a Control Mechanism 

3.1 Propulsion Dynamics 

With emerging advancements in manufacturing processes, structures, and materials, it is a well known fact 
that aircraft engines have become highly complex systems and include numerous nonlinear processes, which 
affect the overall performance (and stability) of the aircraft. From the force-balance point of view, this is 
usually due to the existing coupled and complex dynamics between engine components and their relationships 
in generating thrust. However, in order to utilize the differential thrust generated by the jet engines as a 
control input for lateral/directional stability, the dynamics of the engine need to be modeled in order to gain 
an insight into the response characteristics of the engines. 

Engine response, generally speaking, depends on its time constant and time delay characteristics. Time 
constant dictates how fast the thrust is generated by the engine while time delay (which is inversely propor¬ 
tional to the initial thrust level) is due to the lag in engine fluid transport and the inertia of the mechanical 
systems such as rotors and turbo-machinery blades [6]. 

It is also suggested [6] that the non-linear engine dynamics model can be simplified as a second-order 
time-delayed linear model as 

f + 2Cujt + uj‘^T = - td) (12) 

where ( and uj are the damping ratio and bandwidth frequency of the closed-loop engine dynamics, respec¬ 
tively; td is the time delay factor, and Tc is the thrust command prescribed by the engine throttle resolver 
angle. 

With the time constant defined as the inverse of the bandwidth frequency (r = ^), and ( chosen to be 1 
representing a critically damped engine response (to be comparable to existing studies), the engine dynamics 
can be represented as 


f 

f 




0 

1 


Tcit - td) 


(13) 


For this study, the Pratt and Whitney JT9D-7A engine is chosen for the application in the Boeing 747- 
100, where the engine itself produces a maximum thrust of 46,500 Ibf [13]. At Mach 0.65 and 20,000 feet 
flight conditions, the engine time constant is 1.25 seconds, and the time delay is 0.4 second [6]. 



Figure 1: Engine thrust response at Mach 0.65 and 20,000 feet 
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The engine thrust response curve at Mach 0.65 and 20,000 feet is, therefore, obtained as shown in Fig. 
which provides a useful insight into how the time constant and time delay factors affect the generation 
of thrust for the JT9D-7A jet engine. At Mach 0.65 and 20,000 feet, with the engine time constant of 1.25 
seconds, and the time delay of 0.4 second, it takes approximately ten seconds for the engine to reach steady 
state and generate its maximum thrust capacity at 46,500 Ibf from the trim thrust of 3221 Ibf. The increase in 
thrust generation follows a relatively linear fashion with the engine response characteristic of approximately 
12,726 Ibf/s during the first two seconds, and then the thrust curve becomes nonlinear until it reaches its 
steady state at maximum thrust capacity after about ten seconds. This represents one major difference 
between the rudder and differential thrust as a control input. Due to the lag in engine fluid transport and 
turbo-machinery inertia, differential thrust (as a control input) cannot respond as instantaneously as the 
rudder, which has to be taken into account very seriously in control system design. 


3.2 Thrust Dynamics and Configuration 

In order to utilize differential thrust as a control input for the four-engined Boeing 747-100 aircraft, a 
differential thrust control module must be developed. Here, the differential thrust input is defined as the 
difference between the thrust generated by engine number 1 and engine number 4 while the amounts of 
thrust generated by engine number 2 and 3 are kept equal to each other as shown in Eqs. ( T4p5 ). This 
concept is illustrated in further details in Fig. 


ST = Ti- T4 

T2=T3 


(14) 

(15) 



I 


V 




Figure 2: The free body diagram 

Engine number 1 and 4 are employed to generate the differential thrust due to the longer moment arm 
(ye), which makes the differential thrust more effective as a control for yawing moment. This brings into 
the picture the need of developing a logic that maps the rudder input to differential thrust input, which is 
further explained in the following section. 
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3.3 Rudder Input to Differential Thrust Input Mapping Logic 

When the vertical stabilizer of the aircraft is intact (i.e. with nominal plant dynamics), the pilot has the 
ailerons and rudder as major control surfaces. However, when the vertical stabilizer is damaged, most 
probably, the pilot will keep on demanding the control effort from the rudder until it is clear that there 
is no response from the rudder. To eliminate this mishap, but to still be able to use the rudder demand, 
a differential thrust control module is introduced in the control logic, as shown in Fig. and Fig. 
respectively. This differential thrust control module maps corresponding input/output dynamics from the 
rudder pedals to the aircraft response, so that when the rudder is lost, the rudder input (from the pilot) 
will still be utilized but switched to the differential thrust input, which will act as a rudder-like input for 
lateral/directional controls. This logic constitutes one of the novel approaches introduced in this paper. 



Figure 3: Aircraft control logic diagram 
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Figure 4: Differential thrust control module 

As it can be also seen from Fig. and Fig. the differential thrust control module’s function is to 
convert the rudder pedal input from the pilot to the differential thrust input. In order to achieve that, the 
rudder pedal input (in radians) is converted to the differential thrust input (in pounds-force) which is then 
provided into the engine dynamics, as discussed previously in Section [rlj With this modification, the engine 
dynamics will dictate how differential thrust is generated, which is then provided as a ’’virtual rudder” input 
into the aircraft dynamics. The radian to pound-force mapping is provided in the next section, for the 
completeness of analysis. 

3.4 Radian to Pound-Force Conversion Factor 

Using Fig. [^and with the steady, level flight assumption, the following relationship can be obtained: 

Ndr = ^ST (16) 

qSbCNsA = {ST)ye (17) 

which means the yawing moment by deflecting the rudder and by using differential thrust have to be the 
same. Therefore, the relationship between the differential thrust control input {6T) and the rudder control 
input {6r) can be obtained as 
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Based on the flight conditions at Mach 0.65 and 20,000 feet, and the data for the Boeing 747-100 
summarized in Table and Table the conversion factor for the rudder control input to the differential 
thrust input is calculated to be 


T = _4,43 ^ iqS it (19) 

Or rad 

Due to the sign convention of rudder deflection and the free body diagram in Fig. 5r here is negative. 
Therefore, for the Boeing 747-100, in this study, the conversion factor for the mapping of a rudder input to 
a differential thrust input is found to be 


T = 4,43 ^ iqS iT (20) 

Or rad 

3.5 Commanded vs. Available Differential Thrust 

At this point, the worst case scenario is considered, and it is assumed that the aircraft has lost its vertical 
stabilizer so that the rudder input is converted to the differential thrust input according to the logic discussed 
previously in this section. 

Unlike the rudder, due to delayed engine dynamics with time constant, there is a major difference in the 
commanded differential thrust and the available differential thrust as shown in Fig. 



Figure 5: Commanded vs. available differential thrust 

It can be seen from Fig. [^that compared to the commanded differential thrust, the available differential 
thrust is equal in amount but longer in the time delivery. For a one degree step input on the rudder, the 
corresponding equivalent commanded and available differential thrust are 7737 Ibf, which is deliverable in 
ten second duration. Unlike the instantaneous control of the rudder input, there is a lag associated with the 
use of differential thrust as a control input. This is due to the lag in engine fluid transport and the inertia of 
the mechanical systems such as rotors and turbo-machinery blades [6]. This is a major constraint of plant 
dynamics and will be taken into account during the robust control system design phase in the following 
sections. 
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4 Open Loop System Response Analysis 


Following to this, the open loop response characteristics of the aircraft with a damaged vertical stabilizer 
to one degree step inputs from the ailerons and differential thrust are presented in Fig. Here, it can be 
clearly seen that when the aircraft is damaged and the vertical stabilizer is lost, the aircraft response to the 
pilot’s inputs is absolutely unstable in all four states (as it was also obvious (and expected) from the pole 
locations). This shows the pilot will not have much chance to stabilize the aircraft in time, which calls for a 
novel approach to save the damaged aircraft. This is another point where the second novel contribution of 
the paper is introduced: automatic control strategy to stabilize the aircraft, which allows safe (i.e. intact) 
landing of the aircraft. 





Figure 6: Open loop system response of the damaged aircraft 


5 Robust Control System Design based on H^o Loop-Shaping Ap¬ 
proach 

5.1 Hoo Loop-Shaping Design 

As having been witnessed in Section the open loop responses of the damaged aircraft are unstable in 
all four lateral/directional states. This means the pilot will not have much chance to save the aircraft, 
which calls for a novel approach to save the damaged aircraft and to provide a safe landing. Therefore, in 
this section, the robust control system design based on Hoc loop-shaping approach is chosen as a means 
to stabilize the damaged aircraft due to its ability to suppress external disturbances and noise, and overall 
system robustness. 

The damaged aircraft plant’s open loop singular values are shaped by the pre- and post-compensation 
pT] as illustrated in Fig. 
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Figure 7: The damaged aircraft’s shaped plant and controller 


As it can be seen from Fig. G is the open loop plant of the damaged aircraft while Wi and W 2 are 
the pre- and post-compensation, respectively. The shaped plant is, therefore, 

Gs = W 2 GW 1 ( 21 ) 

In addition, the controller {Kg) is synthesized by solving the robust stabilization problem for the shaped 
plant {Gs) with a normalized left coprime factorization of Gs = Ms~^Ns, and the feedback controller for 
plant G is, therefore, K = WiKsW 2 [E]. 

Next, the implemented loop-shaping diagram is shown in Fig. 



Controller Post-Compensation 


Figure 8: Hoc loop-shaping diagram 

Figure [^provides an insight into the robust controller design based on the loop-shaping approach. 
The main goal of this controller is to stabilize all four lateral/directional states of the damaged aircraft, which 
are roll rate (p), roll angle (0), side-slip angle (/d), and yaw rate (r). The control inputs of the damaged 
aircraft are ailerons (Sa) and differential thrust (ST). As it is obvious from Fig. the pilot’s inputs, which 
are one degree step inputs for both ailerons and rudder, will go through the pre-filter gain i^s(O) 11^2(0) and 
then the Input Control Module^ where the aileron control signal is routed through the saturation limits of 
± 26 degrees m and the rudder control input is routed through the Differential Thrust Control Module^ 
where the rudder input is converted to differential thrust input as discussed previously in Section It is also 
worth noting that there are also a differential thrust saturation limit of 43,729 Ibf and a thrust generation 
rate limiter of 12,726 Ibf/s imposed on the differential thrust control as discussed in Section]^ This is to 
make sure the control inputs are within the limits of both the ailerons and differential thrust. Furthermore, 
in order for the control efforts to be feasible in a real-life scenario, the control effort signals are also routed 
through the Aetuation Dynamies^ where the same saturation and rate limits are imposed on the ailerons and 
differential thrust as discussed previously. 

The next step is to select the weighting functions, which should be taken into careful consideration due 
to the dimensions of the system. 
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After an iterative process, the selected weighting functions for Wi are as 


hFi(ii) — 
^1(22) = 


45 + 1 
45 + 10 

505 + 5 
185 + 25 


We can then construct the system matrix Wi as 


Wi = 


-2.5000 0 2.5981 

0 -1.3889 0 

-2.5981 0 3.0000 

0 -1.8922 0 

0 0 0 


The selected weighting functions for W 2 are as 

W2(ii) = 


16 


5 + 16 

^2(22) = ^2(33) = ^2(44) = 


0 

1.8922 

0 

2.7778 

0 


120 


2.0000 

0 

0 

0 

-Inf 


where the system matrix of W 2 becomes 


120 


( 22 ) 

(23) 


(24) 


(25) 

(26) 


W 2 


-16.0000 

0 

0 

0 

4.0000 

0 

0 

0 

0 


0 

- 120.0000 

0 

0 

0 

10.9545 

0 

0 

0 


0 

0 

- 120.0000 

0 

0 

0 

10.9545 

0 

0 


0 

0 

0 

- 120.0000 

0 

0 

0 

10.9545 

0 


4.0000 

0 

0 

0 

0 

0 

0 

0 

0 


0 

10.9545 

0 

0 

0 

0 

0 

0 

0 


0 

0 

10.9545 

0 

0 

0 

0 

0 

0 


0 

0 

0 

10.9545 

0 

0 

0 

0 

0 


As it is customary in general loop-shaping formulation, the maximum stability margin (e„ 
as a performance criterion 

^max — ^l^min 


4.0000 
0 
0 
0 
0 
0 
0 
0 

—Inf 

(27) 
) is defined 


(28) 


where jmin is the iJoo optimal cost. For our analysis, the maximum stability margin is then obtained as 


= 0.2763 


(29) 


which is within the suggested optimal value bounds: 0.25 < emax < 0.30. 

Next, the Sensitivity (S) and Co-sensitivity (T) plots are constructed. Figure [^illustrates the input and 
output sensitivity functions. 

Next, we can investigate the shaped plant behaviors for inputs and outputs in Fig. 

From Fig. 10, we can see that for the aileron control input ((5^), the shaped plant has very good response 


characteristics of having high gain at low frequencies for tracking and low gain at high frequencies for 
disturbance rejection. For the differential thrust control input (ST), although the gain at low frequencies is 
not as high as that of the aileron control input, but the gain is relatively linear, which makes the differential 
thrust control quite predictable for the pilots. At high frequencies, the gain roll-off is also linear and quite 
similar to that of the aileron control input, which is helpful at rejecting disturbances. In addition. Fig. 
also shows the output responses of the shaped plant in all four lateral/directional states, from which we can 
see that the implemented controller based on Hoc loop-shaping approach can augment the system in two 
groups: roll angle and roll rate (0 and p) and side-slip angle and yaw rate and r). It is also obvious that 
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(a) Input sensitivity functions (b) Output sensitivity functions 

Figure 9: Input and output sensitivity functions 




(b) Output responses of shaped plant 
Figure 10: Input and output responses of shaped plant 
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roll angle and roll rate (0 and p) have higher gains than side-slip angle and yaw rate {P and r), which is 
expected when the aircraft loses its vertical stabilizer. 

In addition, it is possible to look at the augmented control action by the Hoo loop-shaping controller 
in Fig. EH Furthermore, the Co-sensitivity plots related to the shaped plant behaviors for the inputs and 
outputs are presented in Fig. 12 Fig \TT\ and Fig. [improve that the controller based on H^o loop-shaping 


approach is able to achieve desirable closed loop response characteristics in the frequency domain in terms 
of robustness and stability. 



Figure 11: Augmented control action by the loop-shaping controller 

Next, the comparison of the open-loop, shaped, and robustified plant response is carried out to investigate 
the effect of the i^oo loop-shaping on the plant dynamics as illustrated in Fig. p!3|and Fig. 

As seen in Fig. and Fig. compared to the open-loop plant response, the performance of the 
damaged aircraft is further improved by controller. 

5.2 Allowable Gain/Phase Variations: Disk Margin Analysis 

Furthermore, it is also worth checking the allowable gain and phase margin variations (i.e. associated 
uncertainty balls in gain and phase margins for a robust response and guaranteed stability). Obtained 
results are described in Fig. p!5|and Fig. 

From Fig. p!5]and Fig. it can be clearly seen that with the i^oo loop-shaping control system design, 
both the inputs and outputs can achieve desirable and safe stability margins. 

5.3 Simulation Results 

Now it is time to look at the time domain behaviors of our system, which are shown in Fig. It is 

worth mentioning that the control inputs for both plants are one degree step inputs for both the ailerons 
and differential thrust to simulate an extreme scenario test to see whether the damaged aircraft utilizing 
differential thrust can hold itself in a continuous yawing and banking maneuver without becoming unstable 
and losing control. From Fig. it is obvious that after only 15 seconds, all four states of the aircraft’s 
lateral/directional dynamics reach steady state values, which means that the controller can stabilize the 
damaged aircraft in only 15 seconds. However, this comes at the cost of the control efforts as shown in Fig. 
\T8\ which are still under the control limits and without any saturation of the actuators. 
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(a) Co-sensitivity plot for input responses of shaped (b) Co-sensitivity plot for output responses of shaped 
plant plant 


Figure 12: Co-sensitivity plot for input and output responses of shaped plant 


As discussed previously in this section, in order to have a feasible control strategy in real-life situation, 
limiting factors are imposed on the aileron and differential thrust control efforts. The aileron deflection is 
limited at ±26 degrees m- For differential thrust, a differential thrust saturation is set at 43,729 Ibf, which 
is the difference of the maximum thrust and trimmed thrust values of the JT9D-7A engine. In addition, a 
rate limiter is also imposed on the thrust response characteristic at 12,726 Ibf/s as discussed in Section]^ 
The aileron control effort, as indicated by Fig. calls for the maximum deflection of approximately 2.4 
degrees and reaches steady state at approximately -0.1 degree of deflection after 15 seconds. This aileron 
control effort is very reasonable and achievable if the ailerons are assumed to have instantaneous response 
characteristics by neglecting the lag from actuators or hydraulic systems. The differential thrust control 
effort demands a maximum differential thrust of approximately 3350 Ibf, which is well within the thrust 
capability of the JT9D-7A engine, and the differential thrust control effort reaches steady state at around 
15 Ibf after 15 seconds. Therefore, it can be concluded that the robust control system design based on the 
Hoc loop-shaping approach is proven to be able to stabilize and save the damaged aircraft. 


6 Robustness and Uncertainty Analysis 


The robustness of the H^o loop-shaping robust differential thrust control system design presented in this 
paper is investigated by the introduction of 30% of full block, additive uncertainty into the plant dynamics 
of the damaged aircraft to test the performance of the aircraft in the presence of uncertainty. Fig. shows 
the logic behind the robust control system design in the presence of uncertainty. 

One thousand Monte-Carlo simulations were conducted to test the robustness of the damaged plant in 
the presence of uncertainty. The state responses in the presence of 30% of uncertainty are shown in Fig. 

where it is obvious that the robust control system design is able to perform well under given uncertain 
conditions and the damaged aircraft has stable steady state responses within only 15 seconds. In that sense, 
the uncertain plant dynamics are well within the expected bounds. 

However, these favorable characteristics come at the expense of the control effort from the ailerons and 


differential thrust as shown in Fig. 21 

According to Fig. when there is 30% full block, additive uncertainty, the aileron control demands 
the maximum deflection of approximately 2.4 degrees and reaches steady state between -0.12 and -0.09 
degree after 15 seconds, which is quite similar to the required aileron control effort when there is no uncer- 
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Figure 13: Open-loop (G) vs. shaped (Gg) vs. robustified {GgKg) plant for aileron input 
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Figure 14: Open-loop (G) vs. 


shaped (Gg) vs. robustified (GsKs) plant for differential thrust input 
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Allowable Gain/Phase Variations for a 9.07 Disk Gain Margin, 
(stability is guaranteed for all variations inside the ellipse) 



Figure 15: Disk gain and phase margins for inputs 


Allowable Gain/Phase Variations for a 1.97 Disk Gain Margin, 
(stability is guaranteed for all variations inside the ellipse) 



Gain Variation (dB) 

Figure 16: Disk gain and phase margins for outputs 
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Controller Post-Compensation 

Figure 19: Hoo loop-shaping diagram in the presence of uncertainty 
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Figure 20: Closed loop time domain responses of the damaged aircraft in the presence of 30% uncertainty 
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Figure 21: Control efforts in the presence of 30% uncertainty 


tainty. Therefore, the aileron control effort demands are reasonable and feasible due to the limiting factor 
of ± 26 degrees of the aileron deffection m and the assumption that ailerons have instantaneous response 
characteristics by neglecting the lag from actuators or hydraulic systems. 

As for differential thrust, when there is 30% uncertainty, the differential thrust control demands at 
maximum approximately 6500 Ibf, which is within the thrust capability of the JT9D-7A engine, and the 
differential thrust control effort reaches steady state between -100 Ibf (negative differential thrust means 
T1 < T4) and 100 Ibf (positive differential thrust means T1 > T4) after 15 seconds. Compared to the case 
when there is no uncertainty, the demanded differential thrust associated with uncertain plant dynamics is 
higher in both magnitude and rate. It is also obvious from Fig. [^that in a few cases, the differential thrust 
control effort demand hit the thrust generation rate limiter, which is set at 12,726 Ibf/s for the JT9D-7A 
engine, but fortunately, the control system is so robust that throughout 1000 Monte-Carlo simulations, it 
can stabilize the aircraft’s uncertain plant dynamics. Again, due to the differential thrust saturation set at 
43,729 Ibf and the thrust response limiter set at 12,726 Ibf/s, this control effort of differential thrust in the 
presence of uncertainty is achievable in real life situation. 

7 Conclusion and Future Work 

This paper studied the utilization of differential thrust as a control input to help a Boeing 747-100 aircraft 
with a damaged vertical stabilizer regain its lateral/directional stability. The motivation of this research 
study is to improve the safety of air travel in the event of losing the vertical stabilizer by providing control 
means to safely control and/or land the aircraft. 

Throughout this paper, the necessary damaged aircraft model was constructed, where lateral/directional 
equations of motion were revisited to incorporate differential thrust as a control input for the damaged 
aircraft. Then the open loop plant dynamics of the damaged aircraft was investigated. The engine dynamics 
of the aircraft was modeled as a system of differential equations with engine time constant and time delay 
terms to study the engine response time with respect to a commanded thrust input. Next, the novel 
differential thrust control module was presented to map the rudder input to differential thrust input. The 
Hoc loop-shaping approach based robust control system design’s ability to stabilize the damaged aircraft 
was proven as investigation results demonstrated that the damaged aircraft was able to reach steady state 
stability within only 15 seconds under feasible control efforts. Further analysis on robustness showed that 
the Hqq loop-shaping approach based robust differential thrust methodology was also able to stabilize the 
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uncertain plant dynamics in the presence of 30% full block, additive uncertainty associated with the damaged 
aircraft dynamics. 

Through listed analyses above, the ability to save the damaged aircraft by the robust differential thrust 
control strategy has been demonstrated in this paper. This framework provides an automatic control method¬ 
ology to save the damaged aircraft and avoid the dangerous coupling of the aircraft and pilots, which led 
to crashes in a great number of commercial airline incidents. Furthermore, it has also been concluded that 
due to the heavy dependence of the differential thrust generation on the engine response, in order to better 
incorporate the differential thrust as an effective control input in a life-saving scenario, major developments 
in engine response characteristics are also desired to better assist such algorithms. 

Future work includes the implementation of such control algorithms into a small scaled unmanned aerial 
vehicle (UAV) for real-life testing. 
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